LAPORAN

AUDIT DNS SERVER

DOMAIN : MALUTPROV.GO.ID
INSTITUSI : PEMERINTAHAN
VERSI 1.0 DRAFT

OLEH:
I MADE OKA DWIPAYANA 1419451018
I MADE ANGGA SANJAYA 1419451021
KEAMANAN JARINGAN TELEKOMUNIKASI
Daftar Isi

A.

Executive Summary................................................................................................... 4

B. Proses Audit Doman & DNS Server ........................................................................5

B.1. Whois & DNS Record Test ................................................................................5

B.2. Authoritative DNS Server (Master & Slave) Test ..............................................9

B.3. Open DNS Resolver Test ................................................................................. 19

B.4. Zone Transfer DNS Server Test ......................................................................21

A. Executive Summary

Saya telah melakukan Penilaian terhadap konfigurasi dasar pada domain malutprov.go.id
sesuai dengan Best Practice (IETF RFC).

Berikut adalah hasil penilaian untuk domain malutprov.go.id

No Jenis Penilaian Nilai

1 Whois dan DNS Record 8
2 Authorative DNS Server Test 8
3 Open DNS Resolver Test 8
4 Zone Transfer DNS Server Test 8
Jumlah 8
Rata Rata 8
B. Proses Audit Domain dan DNS Server

B.1. Whois & DNS Record Test

Tujuan :
Untuk mengetahui informasi umum tentang domain malutprov.go.id, antara lain :
Tanggal dibuat, expire dan update domain terakhir,
Registrant Contact/Admin Contact/Technical Contact/Billing Contact, Registrar.
Name Server dan DNS Record
Grafik Route Domain

Tools : https://whois.pandi.id/, http://centralops.net/ dan https://www.robtex.com/

Hasil Penilaian : 10

Temuan dan Rekomendasi : Nama admin adalah Ayatullah Khomeini, Admin

Email:omhenk1185@gmail.com,

Proses dan hasil pengujian :

1. Whois Domain
Domain ID: PANDI-DO284608

Domain Name: MALUTPROV.GO.ID

2. Registrant Contact / Admin Contact / Technical Contact / Billing Contact :

Registrant ID:ayatul-98087
Registrant Name:Ayatullah Khomeini
Registrant Organization:Bappeda Provinsi Maluku Utara
Registrant Street1:Gosale Puncak
Registrant City:Ternate
Registrant State/Province:Maluku Utara
Registrant Postal Code:97717
Registrant Country:ID
Registrant Phone:+62.81355911185
Registrant Email:omhenk1185@gmail.com

Admin ID:ayatul-98087
Admin Name:Ayatullah Khomeini
Admin Organization:Bappeda Provinsi Maluku Utara
Admin Street1:Gosale Puncak
Admin City:Ternate
Admin State/Province:Maluku Utara
Admin Postal Code:97717
Admin Country:ID
Admin Phone:+62.81355911185
Admin Email:omhenk1185@gmail.com

Tech ID:ayatul-98087
Tech Name:Ayatullah Khomeini
Tech Organization:Bappeda Provinsi Maluku Utara
Tech Street1:Gosale Puncak
Tech City:Ternate
Tech State/Province:Maluku Utara
Tech Postal Code:97717
Tech Country:ID
Tech Phone:+62.81355911185
Tech Email:omhenk1185@gmail.com

Billing ID:ayatul-98087
Billing Name:Ayatullah Khomeini
Billing Organization:Bappeda Provinsi Maluku Utara
Billing Street1:Gosale Puncak
Billing City:Ternate
Billing State/Province:Maluku Utara
Billing Postal Code:97717
Billing Country:ID
Billing Phone:+62.81355911185
Billing Email:omhenk1185@gmail.com

3. Sponsoring Registrar
Sponsoring Registrar ID:H4964483
Sponsoring Registrar Organization:Kementerian Komunikasi dan Informatika
Sponsoring Registrar Street1:Jl. Medan Merdeka Barat No. 9
Sponsoring Registrar City:Jakarta Pusat
Sponsoring Registrar State/Province:Jakarta
Sponsoring Registrar Postal Code:10110
Sponsoring Registrar Country:ID
Sponsoring Registrar Phone:622138433507
Sponsoring Registrar Website:domain.go.id

4. Name Server
Name Server:DNS1.MASTERWEBNET.COM
Name Server:DNS2.MASTERWEBNET.COM
Name Server:DNS3.MASTERWEB.COM
Name Server:DNS4.MASTERWEB.NET

5. Network Whois Record

% Information related to 45.64.0.0 - 45.64.3.255

inetnum: 45.64.0.0 - 45.64.3.255

netname: MWN-ID
descr: PT Masterweb Network
descr: Corporate / Direct Member IDNIC
descr: Cyber Building 5th, 6th, 9th Floor
descr: Jl. Kuningan Barat No.8
descr: Jakarta Selatan, 12710
admin-c: TH585-AP
tech-c: TH585-AP
remarks: Send Spam& Abuse Reports to abuse@masterweb.net
country: ID
mnt-by: MNT-APJII-ID
mnt-irt: IRT-MWN-ID
mnt-routes: MAINT-ID-MWN
status: ASSIGNED PORTABLE
changed: hm-changed@apnic.net 20140611
source: APNIC

irt: IRT-MWN-ID
address: PT Master Web Network
address: Cyber Building 5th, 9th Floor
address: Jl. Kuningan Barat No.8
address: Jakarta Selatan, 12710
e-mail: abuse@masterweb.net
abuse-mailbox: abuse@masterweb.net
admin-c: TH585-AP
tech-c: TH585-AP
auth: # Filtered
mnt-by: MAINT-ID-MWN
changed: abuse@masterweb.net 20111019
changed: hostmaster@idnic.net 20111019
source: APNIC

person: Tommie Haryanto

address: Cyber Building 9th Floor
address: Jl. Kuningan Barat No.8
address: DKI Jakarta 12710
country: ID
phone: +62-21-5266899
fax-no: +62-21-5276899
e-mail: Tommie@masterweb.net
nic-hdl: TH585-AP
mnt-by: MAINT-ID-MWN
changed: hostmaster@idnic.net 20100525
changed: hostmaster@idnic.net 20100526
source: APNIC
6. Grafik Route Domain
B.2. Authoritative DNS Server (Master & Slave) Test

Tujuan :
Untuk mengetahui dan menilai sejauh mana penerapan konfigurasi DNS Server dan
implementasinya pada domain www.sulutprov.go.id sesuai dengan standar Internet
Engineering Task Force (IETF) RFC 1035 https://www.ietf.org/rfc/rfc1035.txt

Tools : http://www.dnsinspect.com/

Hasil Penilaian : 9

Temuan & Rekomendasi : Score dari hasil pengujian melalui dnsinspect adalah B

Proses dan hasil pengujian :

B.3. Open DNS Resolver Test

Tujuan :
Untuk mengetahui apakah DNS Server yang digunakan di lingkungan TNIAD
mengandung vulnerability, terutama vulnerability yang berhubungan dengan trend saat
ini terhadap DNS Server.

Tools : http://openresolver.com/

Hasil Penilaian : 8

Temuan & Rekomendasi : IP ini tidak rentan untuk DNS Amplification Attacks

Proses dan hasil pengujian :

B.4. Zone Transfer DNS Server (Domain Enumeration) Test

Tujuan :
Untuk mengetahui apakah zone transfer atau zone data atau zone file pada
Authoritative DNS Server domain malutprov.go.id dapat ditampilkan.
Referensi :
http://www.exploit-db.com/download_pdf/13687/

Tools : nslookup, https://hackertarget.com/zone-transfer/

Hasil Penilaian :9

Temuan & Rekomendasi :

Proses dan hasil pengujian :